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Abstract. Modern cryptography is largely based on complexity assumptions, 
for example, the ubiquitous RSA is based on the supposed complexity of the 
prime factorization problem. Thus, it is of fundamental importance to under¬ 
stand how a quantum computer would eventually weaken these algorithms. 
In this paper, one follows Feynman’s prescription for a computer to simulate 
the physics corresponding to the algorithm of factoring a large number N 
into primes. Using Dirac transformation theory one translates factorization 
into the language of hermitical operators, acting on the vectors of the Hilbert 
space. This leads to obtaining the ensemble of factorization of N in terms of 
the Euler function that is quantized. On the other hand, a quantum 

mechanical prime counting function where x factorizes N, is derived. 

This function converges to 7r{x) when N ^ x. It has no counterpart in analytic 
number theory and its derivation relies on semiclassical quantization alone. 

I dedicate this paper to Professor Emeritus Jose Luis Sanchez-Gomez. 


1. Introduction 

The computational effort required to find the prime factor of a large number N 
is the basis for the widely used RSA public key encryption system. This makes 
relevant the study of new methods and algorithms of factorization. The procedures 
of all classical computers algorithms perform different kind of sieves [T] of the primes 
{x} < but, despite the many mathematical successes, the factorization time 

of all classical algorithms still scales, at most, sub exponentially in the number of 
bits of TV = 2K 

Suppose one finds, for some integer a, gcd{a^N) = 1, the period r{a;N) of the 
fnnction f{a;z) = mod N, = f{a;z + r) mod N, then one gets the factors 
N = x+x_ simply as 

x± = gcd{a^/^^\N). 

Shor has found an algorithm that implements the quantum Fourier transform of 
f{z) yielding to the value of r in polynomial time in a quantum computer [2]. 
Yet, the current state of the art of quantum computation would not allow for 
factorization if N is large. 

The grounds of quantum computation speed up versus classical computation is 
the property of entanglement of different states amplitudes (linear superposition) 
for the output of physical systems (qubits) that represents the logic of the algorithm 
itself. Moreover, the very principle of quantum computation is Feynman’s obser¬ 
vation, describing the problem of simulating quantum physics with computers [5] 
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which, in the end, is equivalent to obtaining a pseudo-probability measure from the 
unitary evolution of Wigner’s function, calculated for the input states of the com¬ 
puter. Generally speaking, it would involve the whole Hilbert space of the physical 
system we intend to simulate, and this is the profound difficulty to perform real 
quantum computations. 

Now, following Feynman’s observation, we could ask for the possibility to ob¬ 
taining the Hilbert space of some (already) quantum computer that performs fac¬ 
torization. This is the approach of the paper, in this case, obtaining the physics 
from the classical algorithm (conversely to standard quantum computation that re¬ 
quires the realization of a physical system performing the algorithm). These are the 
grounds and methods of theoretical physics arising from semiclassical quantization 
of arithmetical functions once they are translated to the language of Hamiltonian 
mechanics. To this aim, we will transform the number theoretical functional of fac¬ 
torization, described in section 2, precisely into the Jacobi functional defined in the 
computer coordinates space. It prescribes a methodology based on Dirac-Jordan 
transformation theory[4] and Feynman’s class of quantum computers (full Hilbert 
space) in number theory. 

Moreover, this could also be consistent with the hypothesis of Hilbert and Polya 
(see 0) related to, more precisely, defending the idea that the the Riemann function 
C(s) zeros, should be obtained from the spectrum of a suitable Hermitical operator 
(the Feynman Quantum Computer for Riemann’s C('S)) • It amounts to affirm the 
Riemann hypothesis |6], i.e., for such an Hermitical operator,i?, the Schrddinger 
equation. 


holds in some parametric unbounded space q acting on the Hilbert space vectors 
ipm and the (real) eigenvalues should necessarily correspond to the zeros of ({s) 
on the critical line s = 1/2-1- iT^. 

The meaning of the Hilbert space {ipmiq)}, parametric space {q} and the quan¬ 
tum conditions remains an open question. Some ad hoc ideas dealing with such a 
Hilbert construction have been proposed so far, the more promising being that of 
Berry and Keating [7] relating the semiclassical quantization of some yet abstract 
physical system with the properties of Riemann C(s)- In this work we will not 
follow on these investigations directly, rather we will derive a classical Hamiltonian 
and the Hilbert construction for the factor a; of iV; this is indirectly related to the 
theory of primes upon its dependency with the theory of factorization of a number 
N. 

Therefore, similarly to those ideas, we intend to directly calculate from the meth¬ 
ods of semiclassical quantization the exact values of such a well defined arithmetical 
function. The Hamiltonian methods and quantum transformation theory are the 
resources needed to obtain: (I) the dimensionality of the Hilbert space, (2) the 
semi classical parametric space {q} and (3) the unitary state basis {V’m}- In the 
end, quantization amounts to be equivalent to the requirement of divisibility and, 
in this sense, the discreteness of the factors of an integer N satisfying the limits 
derived from the definition of the classical Hamiltonian is predicted and modeled. 
As in standard quantum mechanics, the correspondence principle is required to re¬ 
cover classical number theory. This is modeled upon the detailed calculation of the 
constants in the integral of the solutions of the quantum conditions. 
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Our results are those of a Sturn-Liouville problem in quantum mechanics obtain¬ 
ing the factorization ensemble. It leads to a methodology to exhaust all the prime 
factor candidates of N. A proof of the successfulness of the present approach is 
the arrival to a new expression for the prime counting function N), derived 

from the exact quantum mechanical solution, having no counterpart in number 
theory, depending on as a parameter, if x factorizes N; the exactitude of this 
quantum mechanical prime counting function increases indefinitely for large N and 
it will eventually become a better approximation than tt{x) ^ Li{x). Indeed, 

7r{x) - ttqm{x-,N) 0 


for ^ 1. This will be the main result of this paper. 

If RSA security can be weakened in this way by a quantum computer, one would 
be led to consider quantum tokens as the alternative to classical network security [5]. 

2. Prime factorization and Hamiltonian Mechanics 

To simulate the computer of factorization we first require the classical theory. 
In physics what one uses is the Jacobi functional of the system written in canonical 
coordinates. So, firstly we are obliged to write a kind of functional analogous law 
to Jacobi’s having the meaning of Euclides’s algorithm for prime factoring N 

7r(x) < 7r(N^^^) 

for the primes candidates x. 

Now, in order to find how the algorithm works in the computer, we should find 
how this restricts the set of the x for some input N. Recall now that for the input 
N there are many other close enough to N that satisfy j = Tr{N^^'^) = 
so X can be a factor of all those Acer’s in a neighborhood T(j) of the input N. Define 
now, for GJ{j), 


( 1 ) 


E{j;xa} = 


n{Xa)TT{N„/Xa) 

f 


And T(j) = {N^; Tr{NA^) = j}] Xa ■ Va = ^ T(j), for the primes {xa,ya), 

and in Eq. (1) defined in T(j) C n{2} ( n{2} being the set of all integers 
having two prime factors). 

For some input number N, T(j) would be the factorization ensemble of N. Now 
if for integer, we could find another prime = N^jxa such that equation (1) 
obtains a single value of Act, then T(j) defines a proximity of N that exhausts all 
the prime factor candidates pairs {xa,ya) of N. 

Moreover, given that, by definition, N G 5’(j), counting all the in TQ), i.e., 
finding the cardinality F(j), will obtain the algorithmic complexity of factoring N. 

Prime Number Theorem^ obtains how F{j) = Card{3^} scales for large N. Let 
7r(A^i/2) = then, since T(j) C n{2}, 

^2{j) j-1 

(2) F{j)= ^ = '^['^ix{jf/x,)-TT{x{j-lf/xi)] = f{j + l)-f{j-l)+j, 

7r20-l) 


2 


I thank to F.A. Gonzalez-Lahoz for these insights (private communication). 
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where 

j-i 

fU) = /Xi) 

i=l 

can be computed asymptotically as 


E 


<3? 




+_ 

^ p(ln(a;(j)2/p) - 1) ln(x(j)2) - 1 ^ P p{Mx{jYlp) - 1) 


}, 


now take x{j) ~ after some straightforward albeit long calculations, replacing 

the sums by integrals 



one gets 

(3) F{j) ~ ■ (lnlniVi/2 + (7) • {1 - InlnTV^/VInTV^/^ • .} 


Here C{N ^ 1) ~ ln2 + Hi, where 

L 

Bi = lim y 1/p - Inln(H) = 0.2614972 • • • 

L —¥00 ‘ ^ 

is Meissel Mertens constant. 

Since finding the co-prime imposes 'n{xa) < one would expect sta¬ 

tistically, as many as TV^/^/xo-possible values of per each Xa in lb(j). 

Hence, we could replace the problem of finding the prime factor a; of with 
that of solving the more general functional equation 

(4) E{j]Xa} = E{N,x)). 


Now rework Eq. (4) introducing the variables p and q. 


(5) 


P = 


T^iVcr) - 
2j 


( 6 ) 


Q = 


n{ya) + Tr{xa) 

2j 


We recast Eq. (4) in the following suggestive way, 
(7) -p^+q^=E 


Whose solution is that of a classical inverted harmonic oscillator 

p = E^/^ sinh(<), 
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q = cosh(i). 

For iV >> 1 the functional E is essentially a step function (because for the same 
value of Xcr there are about ~ values of with almost the same value of 

E)- _ 

Along with the computation of E from Eq.(7), we might have considered vari¬ 
ations in p and q due entirely to changes in t. Now t is approximately a quasi¬ 
continuum parameter at a; << and, at those conditions, it has the meaning of 
the time variable in Hamilton’s equations {E an adiabatic invariant in the variation) 

(8) 5p = —dqH6t, 


(9) 6q = dpElSt 


E[ being the Hamiltonian of the canonical coordinates p and q. 

( 10 ) Hip,q) = l{-p^+q^). 

Moreover p = dqS{q), so that a Hamilton-Jacobi condition exists for the func¬ 
tional S{q) 

(11) H{dqSiq),q) = E/2; 


Jacobi’s functional S{q) is the analogous to the number-theoretical functional 
Eix'). 

Equation (11) is relevant because q is bounded and therefore its solutions are 
confined trajectories in parametric space. 


( 12 ) 


7r(jV/2)+^(2) 

® - 2-7r(Afi/2) 


iiVi/2, 

8 


ui = dsH would be related to the quasi-period of those confined trajectories and 
we are led now to the conditions of semiclassical quantization. 


3. Quantization 

In the E representation, consider the state rpEiq), that determines the quantum 
amplitude of probability of a system semiclassically picked precisely on the classical 
trajectory given by S{q). 

The state of the computer is 

k=FU) ^ 

Where the dimension of the Hilbert space of the computer that factorizes N is 
assumed to be F{j). 
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Now, the Hamilton-Jacobi constraint for S{q) and quantum transformation the¬ 
ory allow us to obtain the momentum operator acting on the wave functional iPe{q) 
for the q-numbers. 

(13) p -idq 

The Hamiltonian constraint in Eq. (7) becoming a Hermitical operator in our 
canonical coordinates acting on '0. ^ 

(14) + g^iA(g) = 


Our coordinate space satisfies E < q < qm{N), where qm{N) < 
therefore, our quantum conditions should be 


(15) 

V^(E1/2)=0; 

(16) 

ip[qm[N)) = 0 


The dimension of the Hilbert space of ip is the cardinality of the factorization 
ensemble, /{T(j)}.'* 

The Schrodinger equation (14) and the Sturn-Liouville constraints (15) and (16) 
define the eigenvalue problem leading to the quantization of E without further 
assumptions. In this sense, dicreteness of the prime factorization of is a natural 
consequence of quantization. 

In order to solve equations (14), (15) and (16) one makes p = q^ and ip = (p/p^^'^, 
obtaining 

(17) -^cp + 2p{r‘^ - —)cp = 0, 

dp^ p 

where I = —1/4, p = 1/2, r = 1/2 and = E/A. 

That is the 3-dimensional Schrodinger equation for the coulombian scattering of 
two identical charged particles in their center of mass. Quantum theoretically, the 
spectrum of E corresponds to the quantization of electricity of some system under 
the conditions of confinement in (17)^. 

^This is similar to what Berry and Keating [3 did while searching the distribution of Riemann 
zeros, their conjecture supporting Hilbert and Polya hypothesis concerned on the existence of some 
Hermitical operator whose eigenvalues T/. correspond to Riemann zeros: <^( 5 ) = 0 , s = 1/2 -|- iT]^. 

^If we were to use the Berry and Keating quatization we should use a canonical transformation 
of our coordinates q = p -\- q and p = q — p. Notwithstanding with the fact that Berry-Keating 
classical Hamiltonian is simpler than ours, Hbk = l/2p^ ■ q\ its quantization requirements must 
encompass quantum transformation theory along with a factor-ordering arbitrarity to get an 
Hermitian operator 

Hsx ^ —^/2(--h g ■ dq) 


acting on ijj. 

^Recall that Bhaduri et al.[9] postulated the same equation of the inverted harmonic oscillator 
to reach the spectrum of Riemann zeros in exactly the same spirit than Berry-Keating[7]; in our 
case, though, we derived the quantum conditions; even though we are rather concerned with the 





SIMULATING FACTORIZATION WITH A QUANTUM COMPUTER 


7 


The solution of (17) is asymptotically for p >> 1 

(18) (l){p) sin(^ - ^ ln(p) + Scoui{E) + So{E)), 

where 6coui{E) = Arg{r{-iE + |)} and 

(19) So{E) = -A - hi + o(l/E^); 


A and hi being the two (yet arbitrary) integration constants of our second order 
differential equation; 5coui(,E) is a shift in the distorted Coulomb wave for the 
asymptote while Sq represents the additional phase drift obtained from the first 
condition at p = E, (j){E) = 0 using the general solution of (17) |T0] 

(20) (/.(p) = 3/2, ip) + cot So{E)F{a, 3/2, ip)}. 

Here F{a,b,c) and U(a,b,c) are the confluent hypergeometric functions, a = 

— 7 — + - 

‘ 4 w 4- 

Now if p 1 

F(a,l/2,ip) - :-^(ip)“exp(ip), 

r(a) 


and 

U{a, 1/2, ip) —>■ 0, 

which directly obtains Eq. (18). Moreover, the logarithmic behavior in 6o results 
also from these aymptotics and the fact that, 

?7(a, 1/2, iE) ~ {iE)~°‘ = exp(77ra/2)(l + ln(i?)a + •••). 

The condition (l>{E) = 0, yields to Eq. (19). 

Eq.(19) is the first quantum condition for the confined wave, the second (j){N/6A) = 
0 imposes from (18) 

(21) ScouiiE) + So{E) + N/128 - E/41n(iV/64) = rnr 

where n is an integer number. 

Redefining n ® , 

(22) n = [iV/(1287r)] - k, 

k an integer, 1 < k < E{j), also taken into account that for large E 

(23) ScouiiE) = Arg{r{-i^ + ^)} ^ £1/4(1 - ln(£;/4) + o{l/E^)). 

Define now, for convenience in the notations, 

7 = j/N^ < 1 . 


distribution of prime factors of an integer N, it is a satisfactory coincidence that the quantum 
Hamiltonian we derived is just the same. 

®We will take the convention that large /c’s map the region E ^ 1 or 7r{xcT) 7r(A^^/^) also 
small quantum numbers correspond to 7r(fCcr) ~ 7r(7V^/^) and in this case E ^ 1. 
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Thus equation (21) leads asymptotically N ^ 1 to 

/Vl/2 1 

-ln(ii;) = -{k- /ii/tt) + o(l/i?^). 

TT A 


Eq. (24) is the second quantum condition and represents the quantization of E. 
It’s just Bohr-Sommerfeld quantization of the states tpkiE; q). 

Let us see how E scales for ^ The functional of factorization attains 

its maximum at 7r(3) = 2, 


(25) 


E{x„ 


3) = 2 


7r(fV/3) 


1 


for ^ 1. Eq. (25) suggests the Ansatz for the Quantum Mechanical Asymptote 
of the arithmetical functional E 


( 26 ) Eqm = El • 

where 

N = fc/I < 1 ~ 0(1), 

Ki = ki/I 

and El = 0(1) is a constant related to ki. 

Eeeding this back into Eq. (24) one directly obtains the appropriate values of A 
and hi: 

Afi/2 ln(l/ 7 ) ^ 


and 


hi ~ wki- 


Therefore, remarkably, the Ansatz (26) becomes the exact asymptotic solution 
of (24). 

Yet, ki must be determined from consistency with the PNT asymptote of E at 
large N^. 


^Recall that Ea- is a step function, i.e., for instance, it takes almost the same value i? ~ l/Sq 
when k belongs to the interval 


(27) 


fc e [/ 


6 


Ari/2 

2 


i.e., for those k's representing the co-primes of S 3^(j) with Xo- = 3 
Thus, in the upper limit we subtracted to E(J) the co-primes with = 2, i.e. 12 

while, in the lower limit, we did the same for those co-primes corresponding to Xa- = 3, namely 
7 V' 1 / 2/2 A^^/^/3. This exhaust all the possible values of k that attains £^ 3 . 

Therefore, at k(3) = kmini3)/I^ Eqs.(25) and (26) taken into account, a relation between 
and El holds 


El = 1/37 


( 28 ) 


-(5/6N2 /F(j)+Ki) 
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Now, in Eq. (1) put 7r(x) ~ Li{x)] etc., to obtain another asymptote for E{x] N) 
if x = C>(iVi/ 2 ) 

(29) Eu{N-x)^{l-u{x-,Nf)-^ 

With the help of the arithmetical function 

u{x] N) = 7 ln(A ^2 lx) 


defined for the prime factor x of N. 

Moreover, u is related to Euler’s function 

(30) = {Xa - 1) • {E^jxa - 1) = iVa - cosh('u/ 7 ) + 1 . 

Now, for e lf(j), E = /(m) is quantized and so are the functions of u.Comparing 
Eqs. (29) and (26), it predicts the existence of a map 

u{x] N) CA K{j). 

Moreover, the function 

^ + iv77 = c«h(«/7), 


takes discrete values in 

Technically, in order to derive explicitly u{k), one has to find and solving the 
Schrodinger equation for provided the canonical transformations 

PE,qE 

Instead of doing this, let’s follow a straightforward approach to obtaining u(k) 
simply using the known statistics for Ng. € T(j). This can be done upon calculating 
a minimal (three points) Lagrange Polynomial fit between k and u in our region of 
interest u ~ 0(1) where the approximation l/E^ is valid. This amounts to selecting 

and 

7V1/2 

u(2) = 7ln(^—) CA k(2) = 1. 

This being done, it provides asymptotically 

(31) u{k) = a{N)K — j3{N)K^ 
where a and (3 are 

(32) a(iV) ~ 2 + 0(7lnl/7); 

(33) /3(Af) ~ 1 + 0 ( 7 In 1 / 7 ). 

Then, 

(34) 


K ~ af{2P) — y — 
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Selecting Ei such that Eqm{ki) = Ei^i{u{Ki)) obtains : 

(35) Ei{ki) {1 - 

This taken into account, Eq.(26) finally yields to 

(36) EQMix; N) = Ei{ki) ■ ^{l//3(«V4-/3«(.W))^/^+/.l-a/(2/3)} 

Here ki, after Eqs. (28) and (35) is the series 

(37) ici cs (1/6)/ ln(l/ 7 ) + R/ ln(l/ 7 )^ + 0(1/ ln(l/7)')}, 
and R = (5/6)0 is a numerical constant. 

4. Prime counting function ttqm{x]N) 

Even though (36) is just the solution for Ina; ^ 1/2 In by construction it 
would become exact in its range of validity (k > ki, say).Then, we might use it to 
obtain a completely new approximation for the prime counting function 7r(a;), i.e., 
for 

X < exp(— u(«;i)/7). 


(38) 


ttqm{x;N) = Eqm{x\N) 
be rewritten 
E{x] N) = X 




t:{N/x) 

Recall that E{x; N) can be rewritten simply as 

t:{N/x) t:{x) 


Nj x'f 

and since PNT asymptote yields to 

tt{N/x) 1 


Eq. (38) obtains 


Nj 1 + u’ 


ttqm{x-, N) -> Ei'-fx (1 + u)Eqm{x-, N); 


where u ~ 1 — 7 (lna; — 1). 

7 , El and Ki being known functions of N. To derive the explicit formula above 
we took ■k{N/x) ~ U{N/x) and 7r(fV^/^) ~ Lf(7V^/^), for N ^ l.The larger N in 

(38) the better its exactitude. 

Remarkably, in the limit N —)■ oo, ki —)■ 0, and we get limj_>oo m = n{ 2 }. 

(39) TTQMix; iV > 1) ~ 7r(a;). 
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X 

Figure 1 : -kqm{x\N) vs actual 7r(x) 
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